REMARKS 

Applicants respectfully request reconsideration of this application as amended. 
Claims 1, 4, 6-8, 12-13, 20 and 31 have been amended. Claims 2-3, 5, 9-11, 14-15, 18- 
19, 21-30 and 32-33 have been cancelled without prejudice. New claims 34-37 have 
been added. Therefore, claims 1, 4, 6-8, 12-13, 16-17, 20, 31 and 34-37 now are 
presented for examination. 

35 U.S.C. § 103 Rejection 

Claims 1, 3, 4, 6-10, 12, 13, 15-17, 20, 31 and 32 are rejected under 35 U.S.C. 
§103(a) as being unpatentable over Dustan U.S. Patent No. 5,884,312 ("Dustan"), in view 
of Kaufman U.S. Patent No. 5,666,415 ("Kaufinan"). 

Applicants submit Dustan discloses "a system and method for securely assessing 
information from disparate data sources through a network" (col. 1, lines 8-10). 
Kaufinan discloses "providing user authentication and a memory for storing a computer 
program for providing user authentication" (Abstract). Neither Dustan nor Kaufman. 
individually or when combined, disclose or reasonably suggest all the limitations of claim 
1. 

For example, claim 1, as amended, in pertinent part, recites "the challenge string 
including a session identification assigned by the service processor, wherein the session 
identification is xmique to each session ... the challenge response including the session 
identification . . . [and] comparing the challenge response to an expected response to the 
challenge string, wherein the comparing includes verifying the session identification 
received in the challenge response with the session identification transmitted in the 
challenge string " (emphasis provided). Dustan does not disclose or reasonably suggest 
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having a session identification assigned by the service processor that is included both in 
the challenge string and the challenge response to later verify the session identification 
from the challenge string with the session identification from the challenge response , as 
recited by claim 1 . 

Kaufrnan discloses "[w]hen a user wishes to authenticate, the server chooses a 
nonce . . . and sends it to the user. The user cryptographically combines the nonce and 
the password and returns the result to the server. The server duplicates the user 's 
calculation and if it gets the same answer it assumes the user must know the password"^ 
(col. 3, lines 1-11). This is not the same as having a session identification assigned by the 
service processor that is included both in the challenge string and the challenge response 
to later verify the session identification from the challenge string with the session 
identification from the challenge response , as recited by claim 1 . Kaufinan does not 
teach any of the limitations missing from Dustan and thus, Kaufinan adds nothing 
relevant to Dustan at least with regard to claim 1. Accordingly, Applicants respectfiilly 
request the withdrawal of the rejection of claim 1 and its dependent claims. 

Claims 8, 13, 20 and 31 contain limitations similar to those of claim 1. 
Accordingly, Applicants respectfiilly request the withdrawal of the rejection of claims 8, 
13, 20 and 31 and their dependent claims. 

Conclusion 

In light of the foregoing, reconsideration and allowance of the claims is hereby 
earnestly requested. 
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Invitation for a Telephone Interview 

The Examiner is requested to call the undersigned at (303) 740-1980 if there 
remains any issue with allowance of the case. 



Request for an Extension of Time 



Applicants respectfully petition for an extension of time to respond to the 
outstanding Office Action pursuant to 37 C.F.R. § 1.1 36(a) should one be necessary. 
Please charge our Deposit Account No. 02-2666 to cover the necessary fee under 37 
C.F.R. § 1.17(a) for such an extension. 

Charge our Deposit Account 

Please charge any shortage to our Deposit Account No. 02-2666. 

Respectfully submitted, 

BLAKELY, SOKOLOFF, TAYLOR & ZAFMAN LLP 



Date: January 12. 2005 



Aslam A. Jaffery 
Reg. No. 51,841 




12400 Wilshire Boulevard 
Floor 

Los Angeles, California 90025-1030 
(303) 740-1980 
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